AFAICT at first glance, on nostr you would only see posts from accounts you follow. There isn't any "algorithm" to feed content to you. Someone can correct me if I'm wrong, but this is my impression. Therefore, it's all self-moderation, and you wouldn't have any spam or messages from hostile randos, because you wouldn't be following them in the first place. And as you say, "the real issue is discovery".